engineering/unrhodecode
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
2251 commits 1 branch 0 tags 110 MiB
Commit graph

68 commits

Author SHA1 Message Date
Marcin Kuzminski
e6fa851ff8 db: prevent empty IN queries that generally are performance problem, and triggers sql warnings. 2017-10-17 20:32:23 +02:00
Marcin Kuzminski
69a865a7a3 repo-groups: moved to pyramid 2017-10-17 14:06:51 +02:00
Marcin Kuzminski
b326189910 repo-forks: security, fix issue when forging fork_repo_id could allow reading 
other people forks.
 2017-10-15 18:54:52 +02:00
Marcin Kuzminski
a00cc457a9 ssh-keys: expose last access time on admin summary page for SSH keys. 2017-09-27 22:21:04 +02:00
Marcin Kuzminski
a9fc01d079 repo-auth-tokens: UX, set and disable to VCS scope if selected an repo from select2 2017-09-21 20:12:13 +02:00
Marcin Kuzminski
b505377197 users: ported controllers from pylons into pyramid views. 2017-09-20 22:29:34 +02:00
Marcin Kuzminski
b95e835ebb audit-logs: allow showing individual entries for audit log. 2017-09-21 16:47:10 +02:00
Marcin Kuzminski
cb071ab951 user-groups: use request partial renderer and not the pylons one. 2017-09-20 20:18:53 +02:00
Marcin Kuzminski
cfe326566d helpers: remove usage of pylons session. 2017-09-19 17:11:48 +02:00
Marcin Kuzminski
0fd76867b6 auth-tokens: allow specifing custom expiration date manually. 
- fixes #5323
 2017-09-08 18:03:35 +02:00
Marcin Kuzminski
e8fe72ebfb admin: cleanup imports. 2017-09-08 12:49:41 +02:00
Marcin Kuzminski
7a511201a1 admin-defaults: ported views to pyramid. 2017-09-08 11:48:48 +02:00
Marcin Kuzminski
a8abeb0d1c user-groups: rewrote the app to pyramid 
- added new event data with added/removed/changed permissions
- cleanup code and spelling
 2017-08-31 12:47:19 +02:00
Marcin Kuzminski
ee20d401c8 users: changed spelling of users_groups to user_groups. Because English :] 2017-08-29 15:46:26 +02:00
Marcin Kuzminski
ebbfb35adf user-group: perms summary, fix view name. 2017-08-25 10:11:32 +02:00
Marcin Kuzminski
7c571b29bc ssh: fixed tests for disabled ssh support 2017-08-20 20:48:10 +02:00
Marcin Kuzminski
3ea8958a92 ssh-keys: added admin panel for managing globally all SSH Keys. 
- added also option to manually update the keyfile
- fetch and show all user keys for audit purpose
 2017-08-17 22:46:26 +02:00
Marcin Kuzminski
928129ed6c repositories: rewrote whole admin section to pyramid. 
- fixed few small found problems
- code cleanups
 2017-08-11 13:00:47 +02:00
Marcin Kuzminski
b98b5eaaa8 auth: added @LoginRequired() decorators for user/user_group views. 
- not really a secirity issue but for consistency we should have them (also provides nicer redirects)
 2017-08-03 22:17:38 +02:00
Marcin Kuzminski
2cc3df1920 users/user_groups: ported permission summary pages into pyramid. 
- added JSON views for extraction of parameters in parasable format.
 2017-08-03 20:18:49 +02:00
Marcin Kuzminski
ee0e7c21f8 users: make AuthUser propert a method, and allow override of params. 2017-08-03 20:17:46 +02:00
Marcin Kuzminski
945777cf9c ssh: added support for auto generating authorized_keys from stored ssh keys. 2017-08-03 16:36:16 +02:00
Marcin Kuzminski
35cefa9b2d users: added SSH key management for user admin pages 2017-08-03 16:35:13 +02:00
Marcin Kuzminski
1c20025ca7 pyramid: use a faster scan method for faster app start. 2017-08-02 11:01:36 +02:00
Marcin Kuzminski
42117ffb8e user-group-admin: use a proper auth filter. 
- we now use an full sql based perm check based on an earlier fetch of allowed IDS
- fixes problem with sql limit/filter and later filterint that by auth.
- can be optimized later
 2017-07-29 22:44:25 +02:00
Marcin Kuzminski
ab192470e0 process-management: dont rely on vcsserver code. 2017-07-28 01:24:06 +02:00
Marcin Kuzminski
42d56172a4 user-groups: moved the display of user group into a pyramid view 2017-07-27 18:56:31 +02:00
Marcin Kuzminski
015ea42459 pull-request: code cleanup 
- use stricter checks
- pull_request_id should be taken from object to cast to INT
- unified some code usage
 2017-07-27 22:48:09 +02:00
Marcin Kuzminski
4de255d013 core: no longer rely on webob exception inside get_or_404 function. 
- relly on pyramid exc only
- helps reduce number of appenlight problems with 404 handling via webob
 2017-07-25 15:26:38 +02:00
Marcin Kuzminski
3f26df9f37 user: deprecated usage of api_keys. 
- additionally we don't load secrets as they are never used (and are expensive to fetch)
- simplify fetching of details improves performance
 2017-07-25 16:27:08 +02:00
Marcin Kuzminski
5b3187fdf9 auth-token: fix way we generate entries inside the list of whitelist names. 
the dotted notation is incompatible with how we check those functions using ':' separator.
 2017-07-24 15:07:17 +02:00
Marcin Kuzminski
3b524b7875 renderer: remove usage of old non request PartialRenderer 2017-07-24 09:59:48 +02:00
Marcin Kuzminski
dc2af71072 permissions: expose new view that lists all available views for usage in whitelist access. 2017-07-21 04:54:36 +02:00
Marcin Kuzminski
ff79205313 global-permissions: ported controller to pyramid view. 
- fixed some other tests cases to rely on test routing
 2017-07-20 15:04:36 +02:00
Marcin Kuzminski
7178db58ba core: use new style pyramid partial renderer where possible. 2017-07-08 15:27:41 +02:00
Marcin Kuzminski
2489c0ed51 core: make pylons global be used in obsolete parts of the code. 
- will help later cleanup of pylons specific code
 2017-07-08 15:23:40 +02:00
Marcin Kuzminski
16cb1534cb process-managemet: added simple page to monitor worker processes of RhodeCode. 2017-07-03 18:30:55 +02:00
Marcin Kuzminski
25436a7365 audit-logs: implemented full audit logs across application. 
- Fixes #5321
- Api+web actions
- To be extended while we develop new features.
 2017-06-21 12:03:14 +02:00
Marcin Lulek
a9ea42785b security: fix self-xss inside the email add functionality. 2017-06-20 20:59:58 +02:00
Marcin Kuzminski
e5ba163e0c audit-logs: consistent data between my-account and admin user logs. 2017-06-20 16:06:36 +02:00
Marcin Kuzminski
effa0f53ce users-admin: moved views into pyramid for editing emails and ips. 
- added audit-logging
- added few additional tests
 2017-06-20 13:53:44 +02:00
Marcin Lulek
ad54b9a57d security: use new safe escaped user attributes across the application. 
- will fix all possible XSS attack vectors.
 2017-06-19 15:14:02 +02:00
Marcin Lulek
0e6fcd4658 security: added missing csrf checks in few missing views. 2017-06-19 09:20:07 +02:00
Marcin Kuzminski
fc4694f91f pyramid: removed pylons reference from apps. 
- this can be completly removed from those views as they are pyramid only.
 2017-06-06 13:35:05 +02:00
Marcin Kuzminski
7216dd64ff audit-logs: introduced new view to replace admin journal. 
- audit logs will represent the all important actions made inside the system
- raw view visible for super-admins
 2017-05-19 10:33:10 +02:00
Marcin Kuzminski
27a8d62042 admin: fix wrong ext_json import from tools. 2017-05-16 21:26:18 +02:00
Marcin Kuzminski
c19a9fc11a system-info: expose the common certificate file path. 2017-05-04 12:30:42 +02:00
Marcin Kuzminski
5369a394e0 user-audit: share same template for rendering audit logs between user and admin views. 2017-04-26 23:05:03 +02:00
Marcin Kuzminski
b595153ea8 user-groups: moved get_user_groups from RepoModel to UserGroupModel. 2017-04-19 16:52:24 +02:00
Marcin Kuzminski
0cf9a67567 admin-users: use new json_ext renderer 2017-04-19 14:34:19 +02:00